1. Their API server provide an attestation JWT. This JWT is signed by Google's private key. 2. The attestation has details on the running container. I suppose the container host is a Google-provided distro and Google's signer will verify that the OS is theirs and up-to-date. 3. They could've proxy the attestation. To prove this is not the case, the field eat_nonce include the TLS certificate fingerprint, which should match the API server you're connecting to. I suppose you will need to pull their container and verify from the source that the container itself generate the private key, it never leaves the container, and the container has no way to run arbitrary code such as SSH or vulnerabilities.

The only two reasons it was worth it is my company paid for it, and you can get a lounge space and some swag at reinvent. I never get to use it professionally

AI Horde seems to be the biggest of them all. Their API speaks KoboldCPP text completion (not even chat completion). It seems that the community (or at least the active people) strongly prefer it this way because the API exposes more tunables than chat completions, which for roleplay use seems to result in better result. I don't know what else you can use AI Horde for anyway since all other use cases likely will require tool use. Just this week I was set out to improve their OpenAI bridge to support chat templates and response parsing. We'll see if I could get it deployed officially then you might be able to use it to code, although you'll have to use RP models.

I think Horde do have a lot more abuse prevention. Workers needs to have 1 week of cumulative uptime to be considered trusted to prevent brigading - users can opt into trusted workers only. Running a worker give you kudos which is required for >512 max tokens generations and also free requests get bumped to last.

If Cursor (and every other commercial VSCode forks) didn't use MS extension store in the beginning and violate the TOS these might not have happened.

You might have leftover reserve instance that applies, which make the listed price inaccurate. That reservation might even be in a different AWS account in the same organization that you don't have access to. That reservation might not even be there between the time you quote and the time you actually launch it if someone/something did launch before you.

Your organization might also have discounts. I believe some discount may also be very confidential. For example, my reseller policy is that the customer must not be able to see AWS Billing in the organization root account as supposedly the price in that console are the price AWS charged the reseller, while we pay listed price minus any discount we negotiated ourselves.

Finally, I suppose they don't want to have prices shown in multiple places as they will need to update it when prices changes. Doesn't want to risk forgetting one place and getting sued for it. You can see that AWS documentations often do not want to mention the price at all, even if that price is currently free.

Chinese clouds kinda make this simple by making reservation part of the buying machine itself - you have to mark that particular machine as monthly/yearly committed when you start it (or convert it later). The complicated part is recycling instances - if you delete a server before its reservation ends it ends up in a recycle bin that you need to look before making new reservations.

My company run this exact code in production since it was created in 2022. We probably have several times more than 1000 rps gRPC requests running internally including over the public internet for hybrid cloud connectivity. That being said, gRPC's xDS client is not always bugs-free.

https://github.com/wongnai/xds

Coop games might don't need as much security as competitive games, as some games do not have global state, or the global state is simply cosmetics. Since nowadays all the anticheat you can buy (except VAC) are kernel mode you'll have to accept the security risk just to have fun with your friends.

The problem with these kinds of game is at some point you'll run into tech debts - your factory layout is not optimal, and the game optimize your starting zone so migrating out means you may lose simple access to starting resources. I tried optimizing for large factory up front, but it's like a startup with a monolith running on a Kubernetes.

Satisfactory solved this by having a fixed map and 3D, but it comes with its own challenges. Good Company partially solved this by replacing belts with humans who can walk anywhere you want, and introduce belt at a late game stage (which I quit around that stage - the game already gets repetitive by that point).

Anyway, what I was describing was not those kind of automation games. RuneScape is an RPG game with over 20+ skills. What make it interesting is that RuneScape bot engines (which exists, but is illegal) do provide all the high level primitives for you in Java. You could provide a world coordinate and a walking script will do all the walk for you even if it is the other side of the world map. It should felt like making games in Scratch instead of reinventing serialization in Screeps.

Other games with scripting also often don't allow human-in-the-loop. If a bot in an automation game get stuck because you forgot to program how to restock teleports, you have to stop it and reprogram. RuneScape bots don't block inputs - if you forgot to make the bot handle stamina exhaustion just click the run button yourself without stopping the script.

RuneScape also comes with strategizing for the human, while the solution space is quite fixed and well discussed by the community if you don't want to find out yourselves. If your Slayer task is green dragons, do you go to a spot that is far from a bank and lose efficiency or give up the loot, or do you go to PvP zone and use cannon (multi target auto turret)? If I write a bot, I probably will write a Wildy Green Dragon script instead of a generic fight-anything script so that it will know to bring cannon and place it at the optimal spot to target all spawns at once. Same goes for many other skills - if I train crafting or construction do I sink millions and go for the highest XP rate or do I go very slowly and get a slight profit out of it.

I'd also add that having a community marketplace would also helps. RuneScape have underground marketplace for bots, with free scripts that probably get you banned, and paid "private" scripts that supposedly undetected. I also have played Mars First Logistics where you build a vehicle Lego-style, then deliver weird cargo like a block of ice or a crate of oranges without a lid. The game have Steam Workshop support where you can just skip building your own vehicle and try to drive someone else's vehicle to destination. I got an ice block pusher, which I need to figure out how to put the ice in (just surround the block, close gate so the block cannot escape), then the map has hills that make your ice fall over the bottom anyway.

>Because direct licensing isn’t available to us on compatible terms, we - like many others - use third-party API providers for SERP-style results (SERP meaning search engine results page). These providers serve major enterprises (according to their websites) including Nvidia, Adobe, Samsung, Stanford, DeepMind, Uber, and the United Nations.

The customer list matches what is listed on SerpAPI's page (interestingly, DeepMind is on Kagi's list while they're a Google company...). I suppose Kagi needs to pen this because if SerpAPI shuts down they may lose access to Google, but they may already have utilize multiple providers. In the past, Kagi employees have said that they have access to Google API, but it seems that it was not the case?

As a customer, the major implication of this is that even if Kagi's privacy policy says they try to not log your queries, it is sent to Google and still subject to Google's consumer privacy policy. Even if it is anonymized, your queries can still end up contributing to Google Trends.

I don't think the main game would encourage that - the more obscure the protocol, the less bot in the actual game (even though I don't think it's hard to find protocol documentation or just plug into an official client). OpenRSC, a revival of RuneScape Classic do have botting worlds, but personally RSC is not "fun" for me.

There are programmer games like Screeps (which the new Arena version just launched at the end of last year), but those game usually do not allow manual play or only indirect play. I tried Screeps, but I'm not good at strategy games, so once I get the runtime working I lose interest and none of my friend would want to help me strategize in game that they do not understand.

I don't think this is related to third-party use of CC. This is the same blocking as Anthropic blocking OpenAI access to CC https://www.wired.com/story/anthropic-revokes-openais-access... , which I think is fair that they don't want to help competitors.